Red Hat Security Advisory: chromium-browser security update

Fixed packages 2

Vulnerabilities 3

• Unscored —
  CVE-2018-6120

  An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior…

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jan 9, 2019
• Unscored —
  CVE-2018-6121

  Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Jun 27, 2019
• Unscored —
  CVE-2018-6122

  Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit …

  Google Chrome chromium-browser oxide-qt Browsers Ubuntu
  Nov 2, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1577113
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1577114
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1577115
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1446.json
• report
  https://access.redhat.com/security/cve/CVE-2018-6120
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6120
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6120
• article
  https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop.html
• report
  https://access.redhat.com/security/cve/CVE-2018-6121
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6121
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6121
• report
  https://access.redhat.com/security/cve/CVE-2018-6122
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-6122
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-6122